United StatesChange Country, Oracle Worldwide Web Sites Communities I am a... I want to...
Bug ID: JDK-7081783 jarsigner error when no $HOME/.keystore
JDK-7081783 : jarsigner error when no $HOME/.keystore

Details
Type:
Bug
Submit Date:
2011-08-22
Status:
Closed
Updated Date:
2012-09-05
Project Name:
JDK
Resolved Date:
2012-09-05
Component:
security-libs
OS:
generic
Sub-Component:
java.security
CPU:
generic
Priority:
P4
Resolution:
Fixed
Affected Versions:
8
Fixed Versions:

Related Reports
Backport:

Sub Tasks

Description
jarsigner includes a certpath validation check, and shows a warning when the check fails. The CertPathValidator object, unfortunately, is initialized in a method that can only be executed if a local keystore is found (either ~/.keystore or specified by -keystore). Therefore, if there is no local keystore but the jarfile's signer can be directly verified by a cert in cacerts, we still see this warning.

                                    

Comments
EVALUATION

fixed: always initialize certpath validator even if ~/.keystore does not exist
                                     
2011-09-05
EVALUATION

http://hg.openjdk.java.net/jdk8/tl/jdk/rev/62c25e4c30a3
                                     
2011-09-05



Hardware and Software, Engineered to Work Together